| CVE-2026-59645 |
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59646 |
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59647 |
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count
|
6.9
Medium
|
Aug 3, 2026 |
| CVE-2026-59648 |
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes
|
6.9
Medium
|
Aug 3, 2026 |
| CVE-2026-59649 |
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59650 |
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-59651 |
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key
|
7.1
High
|
Aug 3, 2026 |
| CVE-2026-12185 |
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check
|
7.1
High
|
Aug 3, 2026 |
| CVE-2026-8763 |
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-15055 |
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
|
5.3
Medium
|
Aug 3, 2026 |